[issue23505] Urlparse insufficient validation leads to open redirect

Yassine ABOUKIR report at bugs.python.org
Tue Mar 3 17:08:33 CET 2015


Yassine ABOUKIR added the comment:

I am not quiet sure about the first proposal but I strongly believe the appropriate method to fix this is by checking if the path starts with double slashes and then URL encoding the two leading slashes.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue23505>
_______________________________________


More information about the Python-bugs-list mailing list